From 7b75e97e964d9bc99453f3f258334603cb786d5c Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa <sunil@medhas.org>
Date: Fri, 29 Sep 2017 16:23:49 +0530
Subject: [PATCH] apache: Move freedombox.conf configuration to Plinth

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Signed-off-by: Joseph Nuthalapati <njoseph@thoughtworks.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 data/etc/apache2/conf-available/freedombox.conf | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 data/etc/apache2/conf-available/freedombox.conf

diff --git a/data/etc/apache2/conf-available/freedombox.conf b/data/etc/apache2/conf-available/freedombox.conf
new file mode 100644
index 000000000..3156b3722
--- /dev/null
+++ b/data/etc/apache2/conf-available/freedombox.conf
@@ -0,0 +1,11 @@
+##
+## Enable HSTS, even for subdomains.
+##
+Header set Strict-Transport-Security "max-age=31536000; includeSubDomains" env=HTTPS
+
+##
+## Redirect traffic on home to /plinth as part of turning the machine
+## into FreedomBox server.  Plinth then acts as a portal to reach all
+## other services.
+##
+RedirectMatch "^/$" "/plinth"